US 2012/0260343 A1 · AUTOMATED MALWARE SIGNATURE GENERATION

Abstract

Automated malware signature generation is disclosed. Automated malware signature generation includes monitoring incoming unknown files for the presence of malware and analyzing the incoming unknown files based on both a plurality of classifiers of file behavior and a plurality of classifiers of file content. An incoming file is classified as having a particular malware classification based on the analyzing of incoming unknown files and a malware signature is generated for the incoming unknown file based on the particular malware classification. Access is provided to the malware signature.

Claims20

Dependent claims

A method, comprising:

classifying a file based at least in part on one or more behaviors associated with an execution of the file;
and
generating a malware signature corresponding to the file based at least in part on the classification.

Dependencies are inferred from the claim text.

Facts

Application

13/486,518Filed 1 Jun 2012

Priority

19 Sep 2006

Published

11 Oct 2012

Term ends

Not estimatedThe source records don’t support an estimate.

Classification3 codes

G06F 21/566
Computer malware detection or handling, e.g. anti-virus arrangements: dynamic detection, i.e. detection performed at run-time, e.g. emulation,…
G06F 21/564
Static detection: by virus signature recognition
G06F
Computing and data processing

Automated malware signature generation

Life of this patent

Automated malware signature generation

Life of this patent

Abstract

Claims20